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Description 

This invention is directed to methods of software protection and, more particularly to a cryptographic 
method for discouraging the copying and sharing of purchased software programs by allowing an encrypted 

5 program to be run on only a designated computer or, alternatively, to be run on any computer but only by 
the user possessing a designated smart card. 

With the proliferation of so-called micro computers or personal computers, there has been an explosion 
in the writing and publishing of software for these computers. The investment in time and capital in the 
development of a good software program can be substantial, and in order to recoup this investment, the 

w authors, copyright owners and/or publishers must rely on royalties and the amortization of costs produced 
by the sale of the programs. Since programs are generally distributed on inexpensive floppy diskettes, the 
end user often does not appreciate the substantial costs in the production of the programs. Moreover, the 
disk operating systems of most micro computers feature a disk copy utility which enables the end user to 
easily make back up copies of program diskettes. The result has been misuse of the utility to make 

75 unauthorised copies. For example, two or more potential end users desiring a program may pool their 
resources and buy one copy of the program and then duplicate both the program diskette and the 
copyrighted manual that accompanies the program diskette. As another example, a small business having 
several micro computers may buy a single copy of a program and then duplicate the program diskette and 
manual in order to distribute copies to each micro computer station in the company. Both of these 

20 examples are clear violations of the copyright laws, but searching out the prosecuting violators is often 
impossible. The net result is a substantial loss of revenues to software authors and publishers. These 
revenues are needed in order to finance the development of new and improved software programs as well 
as to provide a reasonable profit to those who produced the programs that are copied without authorisation. 
The problem of unauthorised copying and use of programs has been addressed by the prior art. US-A- 

25 4,120,030 to Johnstone discloses a computer software security system wherein the data address portions of 
a set computer instructions are scrambled in accordance with a predetermined cipher key before the 
instructions are loaded into an instruction memory. The data involved in the program is loaded into a 
separate data memory at the addresses specified in the original, unscrambled program. An unscrambler 
circuit, which operates in accordance with the cipher key, is coupled in series with the data memory 

30 address input conductors. 

US-A-4, 168,396 to Best discloses a microprocessor for executing computer programs which have been 
enciphered during manufacture to deter the execution of the programs in unauthorised computers. US-A- 
4,278,837 to Best discloses a crypto-microprocessor chip that uses a unique cipher key or tables for 
deciphering a program so that a program that can be executed in one such chip cannot be run in any other 

35 microprocessor. US-A-4,433,207 to Best discloses an integrated circuit decoder for providing micro 
computer users with access to several proprietary programs that have been distributed to users in cipher. 
The decoder chip can decipher a program if an enciphered key called a "permit code" is presented to the 
decoder chip. 

US-A-4,446,519 to Thomas discloses a method for providing security for computer software by 

40 providing each purchaser of a software package with an electronic security device which must be 
operatively connected to the purchaser's computer. The software sends coded interrogation signals to the 
electronic security device which processes the interrogation signals and transmits coded response signals 
to the software. The programs will not be executed unless the software recognizes the response signals 
according to preselected security criteria. 

45 The various schemes disclosed by these patents require specialized and dedicated hardware for 
accomplishing the security feature. Generally, these schemes are cumbersome and expensive to implement 
and therefore not commercially acceptable. What is needed is a software protection scheme which is 
simple and inexpensive to implement, avoiding, in its simpler forms, the need for specialised and dedicated 
hardware, but still able to be extended by the use of additional hardware and which is attractive to a large 

so number of diverse software publishing houses. 

Further prior art methods for preventing unauthorized copying are disclosed in EP-121853-A, EP- 
089876- A, and the article "Combatting software piracy by encryption and key management", Computer, 
Vol. 17, No. 4, April 1984, pages 68-73, Long Beach, California, US; D J Albert et al. 

Therefore, according to the present invention, there is provided, as the core method, a method of 

55 software protection comprising the steps of encrypting a program with a file key, and writing the encrypted 
program on a storage medium as a program file; providing a computer, having a protected memory and a 
cryptographic facility, with a secret cryptographic key identifier cryptographically derived from a number 
identifying the computer; providing a user of the storage medium containing the encrypted program with a 
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password cryptographically derived from at least the file key, the number identifying the computer, a 
number identifying the storage medium, and a number identifying the program; entering the password into 
the computer when the medium is loaded thereinto; deriving the file key from at least the password, the 
storage medium number, the program number, and the cryptographic key identifier; and decrypting into 

5 executable form at least a portion of the program using the derived file key. 

Such a software protection scheme is inexpensive to implement and is essentially transparent to the 
end user so that it does not detract from the commercial appeal of the software program. It can be arranged 
to allow copying of the program diskettes to a hard disk or for purposes of making backup copies yet limit 
the simultaneous beneficial use of multiple copies to one or more designated computers or, alternatively, 

w limit the use to one unique, non-reproducible and portable device or, alternatively, to be run on any 
computer but only by the user possessing a designated smart card. 

Put another way, ideally in this arrangement, each program offering sold by a software vendor is 
encrypted with a unique file key and then written on the diskette. A user who purchases a diskette 
containing an encrypted program must first obtain a secret password from the software vendor. This 

75 password will allow the encrypted program to be recovered at a prescribed, designated computer having a 
properly implemented and initialised encryption feature which may be stored in Read Only Memory (ROM), 
for example. As part of an initialisation process, when the program is first loaded, it polls the user to input 
the password. The password is written by the program in the header record of the file, and once written in 
the header record, the program will not prompt the user to input his or her password on subsequent uses of 

20 the program. When-the diskette is loaded _at the proper computer, the encrypted program or a controlling 
portion of it is automatically decrypted and written into a protected memory from "which it can only be 
executed and not accessed for non-execution purposes, tn an alternative embodiment, the user is not 
confined to a prescribed, designated computer but may use the program on other, different computers 
provided that such computers incorporate a smart card. A smart card as defined herein is one having a 

25 crypto capability, typically implemented by incorporating a micro-circuit on the card. The smart card is 
issued to the user when the user purchases a computer. The smart card is preinitialised by the computer 
manufacturer with a secret parameter unique to that card. The procedure is similar except that in this case, 
the password used in conjunction with the smart card allows the user to decrypt and execute the program 
on any computer having a properly implemented and initialised encryption feature. The smart card 

30 embodiment can be further modified to allow portability with a combination of both a Public Key (PK) 
algorithm and the Data Encryption Standard (DES) algorithm. In this case, the designated public registry 
(key distribution centre) additionally personalises the card with the public key of the computer manufacturer 
as well as a unique secret card key (the DES key). When a customer buys software, the customer 
automatically obtains a personalised intelligent secure card (smart card). Each different program recorded 

35 on the diskette is encrypted under a different file key designated by the supplier of the software. The 
customer then obtains an authorisation number and password from the software vendor, as before. The 
password is written in the header of the file on the diskette. The computer is also personalised with a 
unique key pair, a public computer key and a secret computer key. However, the public computer key is 
first decrypted under the secret key of the computer manufacturer and stored in the computer in that form. 

40 When the program diskette is used, there is a handshake protocol between the smart card and the 
computer which, in effect, recovers the file key and enciphers it under the public key of the computer. This 
protocol is such that the handshake will work only at a suitable computer with a public key algorithm and a 
properly installed key pair; i.e, a secret computer key and a public computer key decrypted under the 
secret key of the designated public registry. The advantage to this approach is that the file key can be 

45 encrypted using a public key, and it is not necessary for a universal secret DES key to be stored on each 
smart card. The protocol for password generation and distribution is unaffected by the modification to the 
internal protocol; i.e., it is the same for the DES only smart card as for the DES/PK smart card. 

The present invention will be described further, by way of example, with reference to embodiments 
thereof, as illustrated in the accompanying drawings, in which :- 

so Figure 1 is a block diagram of an overview of one form of system according to the invention, which does 
not involve the use of a smart card; 

Figure 2 is an illustration of a program diskette format compatible with the system of Figure 1 ; 

Figure 3 is a flow diagram illustrating the password generation key management associated with the 

system of Figure 1 ; 

55 Figure 4 is a flow diagram illustrating the operation of the computer cryptographic facility key manage- 
ment associated with the system of Figure 1; 

Figure 5 is a block diagram of an overview of another form of system according to the invention which 
uses a smart card; 
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Figure 6 is a flow diagram illustrating the password generation key management associated with the 
system of Figure 5; 

Figure 7 is an illustration of a program diskette format compatible with the system of Figure 5; 

Figure 8 is a flow diagram illustrating the operation of the computer cryptographic facility key manage- 
5 ment associated with the system of Figure 5 and using the DES algorithm; 

Figure 9 is a flow diagram illustrating the operation of the smart card using the DES algorithm; 

Figure 10 is a flow diagram illustrating the generation of program diskettes by a software vendor; 

Figure 11 is a block diagram of the components internal to a computer which incorporates the 

cryptographic facility required in the practice of the present invention; 
10 Figure 12 is a block diagram showing the basic components of a smart card usable in some 

embodiments of the invention; 

Figure 13 is a flow diagram illustrating the operation of the computer cryptographic facility key 
management with the smart card using the DES/PK algorithm; 

Figure 14 is a flow diagram illustrating the operation of the smart card using the DES/PK algorithm; 
75 Figure 15 is a flow diagram illustrating a first operation of the cryptographic facility which derives a file 
key from user input parameters; 

Figure 16 is a flow diagram illustrating a second operation of the cryptographic facility which causes a 
random number to be generated; 

Figure 17 is a flow diagram illustrating a third operation of the cryptographic facility which uses a 
20 password from a smart cardand a random number to derive a file key to decrypt a program; 

Figure 18 is a flow diagram illustrating a fourth operation, similar to the first, of the~cryptogTaphic facility 
for generating a file key using a different algorithmic procedure than used in the first operation; 
Figure 19 is a flow diagram illustrating a fifth operation, similar to the second, of the cryptographic facility 
for generating a file key using the same algorithmic procedure as used in the forth operation; 
25 Figure 20 is a flow diagram illustrating a sixth operation of the cryptographic facility for generating a file 
key from user input parameters for encrypting data; and 

Figure 21 is a flow diagram illustrating a seventh operation of the cryptographic facility which accepts a 
password from a smart card for generating a file key for encrypting data. 

In the description which follows, the notations "e" and "d" are used to denote encrypted and decrypted, 
30 respectively. For example, "ePKt(KF)" means the key KF is encrypted under the key PKt. Similarly, "dSKu- 
(PKt)" means the key PKt is decrypted under the key SKu. Also, the term "personal computer" is intended 
to cover so-called "smart terminals" which may include personal computers connected to a main frame 
computer in the network. 

Referring now to the drawings and more particularly to Figure 1 , there is shown an overview of the first 
35 embodiment of the invention. The system according to this embodiment comprises a personal computer 1 0 
having a crypto protected storage facility 101. Each program offering 12 sold by the software vendor is 
encrypted with a unique file key, KF, and then written on the diskette. The format of the diskette is generally 
shown in Figure 2. One type of cryptographic method that may be used is a cipher block chaining 
technique which requires an initialising vector. If desired, different initialising vectors using the same file 
40 key, KF, can be used to encrypt the same program written on different diskettes. This ensures that different 
cipher text is produced for each diskette and prevents differences in the plain text from being observed by 
comparing the corresponding cipher text. The initialising vector is written in the header record on the 
diskette. 

A user, who purchases a diskette containing an encrypted program, must first obtain a secret password 
45 from the software vendor. This password will allow the encrypted program to be recovered at the 
prescribed, designated personal computer 10 having a properly implemented and initialised encryption 
feature. The secret password allows the particular program to be decrypted, and thus executed, only on a 
particular personal computer. This secret password is unique to the particular program and computer where 
it is to be recovered and executed. The password will not allow other encrypted programs to be recovered 
so on that computer, nor will it allow that same encrypted program to be recovered on a different computer. 
Optionally, the user could be given a second password that would allow the encrypted program to be 
recovered on a designated backup computer. Except for the backup computer, the user would ordinarily be 
expected to pay an extra fee for each additional password that would allow the encrypted program to be 
recovered on a different computer. 
55 Each diskette has a unique serial number written on the diskette envelope or outer cover (not shown) 
and visible to the user. As shown in Figure 2, this serial number is also recorded in the header record of the 
diskette. Also recorded in the header of the diskette is the program number. In the specific example shown 
in the figure, the program number is "12" and the serial number or diskette number is "3456". A multi-digit 
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authorisation number is obtained by encrypting the program number and diskette serial number, concat- 
enated together, under a secret cryptographic key available to and known only by the software vendor. An 
n-bit portion of the authorisation number is also written on the diskette envelope except that it is covered by 
a thin metallic film much like that used by the instant lotteries to hide numbers on lottery cards. Where n is 

5 equal to 16, for example, there are 65,536 possible numbers for the portion of the authorisation number 
written on the diskette envelope and therefore, one would have only a chance of one in 65,536 of accidently 
guessing a correct number written on the diskette envelope. 

When a password is requested, an authorisation number of reference is generated in the same manner 
as that for generating the authorisation number. For each password initially issued, a record is made in a 

70 data base that this is a first use of the authorisation number of reference in the process of issuing the 
password to a requesting user, and a record is also made of the password which is issued. Therefore, for 
each request of a password, a first use check is made to determine whether the authorisation number of 
reference has been previously used for generating the password. 

The procedure is illustrated in Figure 3. After purchasing a diskette, the user places a telephone call to 

j s the software vendor. It is assumed that the user will not accept a diskette whose authorisation number has 
been exposed, i.e. where the metallic film has been scratched off. The customer provides the software 
vendor with the program number, the n-bit portion of the authorisation number, the diskette serial number, 
and the computer number. Each computer 10 has a unique identification or number that is provided on the 
cover, for example, by a press-on label visible to the user. This identification or number is associated with 

20 the secret key of the crypto facility of the computer. The program number and the diskette serial number 
are loaded into register 20. Recall that for the specific example shown in Figure 2, these numbers are -"12" 
and "3456", respectively. Then in block 21, the software vendor simply encrypts the provided program 
number and diskette serial number, concatenated together, with a special secret key, SK, used only to 
generate multi-digit authorisation numbers. The n-bit portion of the authorisation numbers written on the 

25 diskettes are produced with the same encryption technique. The multi-digit authorisation number or 
reference is first checked in the software vendor's database to determine if the authorisation number has 
been used before. Alternatively, the software vendor could perform this check using the program number 
and diskette serial number. In this case, the software vendor simply records the program number and 
diskette serial number in his data base whenever a password has been issued for those numbers. If the 

30 authorisation number or the program number and diskette serial number have been used before, the 
software vendor knows that a password has been issued for that program number and diskette serial 
number and that this password has been recorded in his data base. In that case, the password is retrieved 
and reissued to the caller. This process is represented by block 22 in Figure 3. On the other hand, if the 
result of this process indicates a first use, then in block 24 the designated n-bit portion of the authorisation 

35 number of reference produced in block 21 is compared with the n-bit portion of the authorisation number 
provided by the caller. If a match is obtained, the software vendor generates a special password that will 
allow the encrypted program to be decrypted and executed at the designated computer. To accomplish 
this, the software vendor forwards an electronic message to the key distribution centre 14, passing the 
program number, diskette serial number and computer number. The key distribution centre 14 encrypts the 

40 computer number with a key, KT, in encryption block 26 to produce an encryption key,eKT(TR), unique to 
that particular computer. Alternatively, the key eKT(TR) could be obtained from a table of stored keys. The 
program number and the diskette serial number in register 28 are then encrypted in encryption block 30 
with the key eKT(TR) to produce a cryptographic key unique to the program and computer. In the example 
illustrated, this cryptographic key is eKT(PG 123456). The key distribution centre 14 then returns the 

45 cryptographic key to the software vendor. To further enhance the security of the system, encryption can be 
used between the software vendor and the key distribution centre to protect the secrecy of the cryp- 
tographic key. 

Meanwhile, the software vendor has obtained from its database the file key, KF, corresponding to the 
program number provided by the caller as indicated by table 32. 
so The key KF is then encrypted in encryption block 34 with the cryptographic key returned by the key 
distribution centre 14 to generate the requested password. The generated password is then given to the 
caller. Passwords may be, for example, 64-bits long and therefore cannot be guessed or derived from other 
information available to the caller. As a last step, the software vendor now makes a record in his data base 
that this is the first use of the authorisation number of reference in the process of issuing the password to a 
55 requesting user, and he also records the calculated password in his data base. 

As part of the initialisation process, when the program is loaded in the computer 10, it polls the user to 
input the password. The password is written by the program in the header record of the file as shown in 
Figure 2, and once written, the program will not prompt the user to input his or her password on subsequent 
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uses of that program. For example, a protocol could operate such that the computer always reads the 
header of the diskette looking for a recorded password. If no password is found, it prompts the user to enter 
the password and then writes the password in the header. If the password is found in the header, the 
computer uses this password in lieu of prompting the user to enter a password. The user could also be 

5 provided with an override to enter the password in case the password recorded in the header fails to 
produce the correct file key, KF; i.e., the encrypted file is not recovered properly with the recovered key KF. 
Note that from the software vendor's viewpoint the password need not be kept secret since it does not 
unlock other encrypted programs. 

Optionally, the procedure for issuing passwords at the software vendor could be fully automated by 

10 using a voice answer back system in conjunction with a multi-frequency tone input. For example, the caller 
would be prompted to enter the appropriate numbers using the multi-frequency tone keyboard on a 
telephone, and these numbers would be repeated to the user for verification. If a proper authorisation 
number is given, an electronic message is sent to the key distribution centre 14 to obtain the necessary 
cryptographic key. This message is used to calculate the password which, in turn, is repeated to the cailer 

75 using the automated voice system. The process of obtaining the password from the software vendor could 
be automated still further by initiating a communications session between an initialisation program in the 
personal computer 10 and a password distribution program located in the computer system of the software 
vendor. In this case, the user would call the 800-number and initiate the session. The program number and 
diskette serial number could be read from the header record of the diskette where they have been written 

20 by the software vendor. The computer number could be stored within the system and provided automati- 
cally also. The user would be prompted at the" apprbpTiate point in the session to enter the authorisation 
number through the keyboard. The obtained password would be written automatically to the header record 
of the diskette file. 

If necessary, the user can contact the software vendor at any later time to re-receive his or her 
25 password. To do this, he supplies only the program number and diskette serial number, which is enough 
information to allow the software vendor to determine that a password has already been issued for that pair 
of numbers and to recover the password value which has been recorded previously in his data base. In 
essence, the caller is given an already calculated password for any program number and diskette serial 
number in the vendor's database. This option does not weaken the system but merely makes it more 
30 usable by end users. 

When the diskette is loaded at the proper computer 10, the encrypted program or a portion of it is 
automatically decrypted and written into a protected memory 101 from which it can only be executed and 
not accessed for non-execution purposes. This is shown in Figure 4 where the cryptographic facility 101 of 
computer 10 reads password, program number and diskette serial number from the file header. The 

35 program number and diskette serial number concatenated together are encrypted in encryption block 103 
with the encryption key for that particular computer to produce a decryption key which is used in decryption 
block 105 to decrypt the password and produce the secret file key, KF, that is used in decrypting the 
program or a portion of the program. The procedure used is the Data Encryption Standard (DES). Note that 
only the designated computer is capable of generating the decryption key what will produce the file key, 

40 KF. 

Turning now to Figure 5, there is shown an alternative embodiment which is an extension of the first to 
allow portability of an encrypted program by means of a smart card 16. In this embodiment, when the user 
purchases a computer, the user is also issued with a smart card 16 that is pre-initialised by the computer 
manufacturer with a secret parameter unique to that card. A user, who purchases a diskette containing an 

45 encrypted program, also obtains a secret password from the software vendor as before, except here, the 
password is used in conjunction with the smart card to allow the user to decrypt and execute the program 
on any personal computer having a properly implemented and initialised encryption feature. 

The process is illustrated in Figure 6. To obtain the secret password, in this case, the user provides the 
smart card number rather than the computer number. Each smart card has a unique identification or card 

50 number that can be read by the user. If the authorisation number is valid and another request has not been 
made for that program number and diskette serial number as indicated by the compare blocks 22 and 24, 
the software vendor generates a special password that will allow the encrypted program to be decrypted at 
any personal computer with a valid encryption feature when used with that smart card. Again, the software 
vendor obtains a unique cryptographic key from the key distribution centre 14 which is used in conjunction 

55 with the secret file key to generate the requested password. In this case, the key distribution centre 14 is 
owned, controlled or established under the direction of the computer manufacturer and uses the card 
number to obtain a corresponding card encryption key, KP, from table 27. Alternatively, the key KP can be 
generated from a secret key belonging to the key distribution centre in a similar manner as the eKT(TR) 
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keys are generated using secret key KT as shown in Figure 3. This encryption key is then used to encrypt 
the program number and diskette serial number in encryption block 30 to produce the cryptographic key 
that is returned to the software vendor. As before, the security of the system can be enhanced by using 
encryption between the key distribution centre and the software vendor to protect the secrecy of the 

5 communicated keys. Otherwise, the protocol is the same as that for the first embodiment. The password is 
written in the header record of the diskette as illustrated in Figure 7. The same options are available for 
automating the process at the software vendor. Likewise, an initialisation program in the personal computer 
10 can be used to automatically obtain the password from the software vendor, except here the smart card 
number must be entered instead of the computer number. The smart card number could be read from the 

io smart card or from a location in the computer where it had been previously stored. 

When the diskette is loaded at any authorised computer and the smart card 16 has been inserted into a 
proper reader device allowing the card and computer to carry on an electronic dialogue, the encrypted 
program is automatically decrypted and written into the protected memory 101 from which it can only be 
executed. More specifically, as shown in Figures 8 and 9, the computer 10 reads the program number, 

75 diskette serial number and password from the file header and passes these with its computer number to the 
smart card 16. In the smart card 16, the computer number is encrypted in encryption block 161 with a 
universal key, KT stored on every smart card. The program number and diskette serial number are 
encrypted in encryption block 162 with a key KP which is unique to and stored in the smart card. The 
oujpu^o^encry ption block 162 is a decryption key that is used by decryption block 163 to decrypt the 

20 password to produce the secret file keyT KF. -- - . — 

Meanwhile, the cryptographic facility 101 of computer 10 produces a random number T using a random 
number generator 107 or the system clock. As part of the internal protocol interchange between the 
computer 10 and the smart card 16, the random number T is passed to the smart card where it is exclusive 
ORed with the file key, KF. The resulting output is encrypted in encryption block 164 with the output of 

25 encryption block 161 to produce a computer password that is then passed back to the computer. This 
computer password is then decrypted in decryption block 109 using a key unique to the computer. The 
output of decryption block 109 is exclusive ORed with the random number T to produce the secret file key, 
KF. Note that passwords generated by the card are time variant. If intercepted and replayed back into the 
computer at a later time, they will not allow another copy of the encrypted program on a different diskette to 

30 be decrypted and executed. 

Figure 10 shows the process of generation of program diskettes. First, a clear diskette 36 containing the 
program is supplied by the software vendor to the software distributer. The software distributer then 
encrypts the program in encryption block 38 using a key KF to produce and encrypted diskette 40. The key 
KF could be common to a program or unique for each diskette. The encrypted diskette is then copied with 

35 a disk copier 42 to produce encrypted diskettes 44 for sale to users. Obviously, in the process illustrated, 
the software distributer and the software vendor could be one and the same. 

Figure 11 shows the cryptographic facility 101 in the personal computer 10. The cryptographic facility is 
a secure implementation containing the Data Encryption Standard (DES) algorithm and storage for a small 
number of secret keys. It can be accessed logically only through inviolate interfaces secure against 

40 intrusion, circumvention and deception which allows processing requests via a control line, key and data 
parameters to be presented, and transformed output to be received. The cryptographic facility comprises a 
ROM, such as an EAPROM (Electronically Alterable and Programmable Read Only Memory), 113 that 
contains the computer key. Additional ROM 114 contains programs for key management sequence 
generators and disk loader. Additional Random Access Memory (RAM) 115 contains a parameter output 

45 buffer, a parameter input buffer, intermediate storage for parameters, data and keys, and additional storage 
for the decrypted programs. The RAM 115 is the protected memory of the cryptographic facility 101, and 
decrypted programs stored here can only be executed and not accessed for non-execution purposes. 

Figure 12 shows the basic components of a smart card used in certain embodiments of the invention. 
The smart card must contain a microprocessor chip 165 for executing the crypto algorithm. Further, the 

50 card is provided with memory for storing the key KP and card number. The key KP, which is unique to the 
card and kept secret, is stored in private memory 166, while the card number is stored in public memory 
167. Power for the microprocessor chip and supporting memories is derived from the computer 10. 

The described protocol allows other software vendors to market encrypted programs that will operate 
with a personal computer or with a personal computer and smart card with no loss of security to protected 

55 software or the secret keys or parameters that support the system. To interface to the system, it is only 
necessary for the software vendor to forward an electronic message to the key distribution centre, passing 
the program number and computer number or, in the case of an implementation supporting smart cards, 
passing the program number and smart card number. The key distribution centre returns a cryptographic 
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key unique to the program number and computer number or smart card number which the software vendor 
used in conjunction with the secret file key under which the program has been encrypted to generate the 
required password. To ensure that the same key is not produced by two different software vendors who 
have two different programs with identical program numbers, the protocol can be modified slightly by 

5 assigning a unique two or three digit code number to each software vendor and then merely redefining the 
program number to consist of the software vendor code number followed by the software vendor defined 
program number, i.e. by as many digits as are necessary to distinguish different programs offered by that 
software vendor. Thus, the program number and diskette serial number used in calculations is replaced by 
vendor number, program number and diskette serial number. 

10 Referring now to Figures 13 and 14, as already alluded to, the second embodiment of the invention 
using the smart card can be extended using a public key algorithm. More specifically, a public key (PK) 
algorithm is also installed in the smart card and computer in addition to the DES algorithm. The advantage 
of doing this is that the protocols for the three techniques are very similar. Introduction of the PK algorithm 
does not affect the password generation/distribution process described with reference to Figure 6. In this 

T5 embodiment, the main advantage of the PK algorithm is achieved, namely that a universal secret key need 
not be stored on the smart card. The card manufacturer personalises the card with the key KP. The 
manufacturer also personalises the card with PKu, the public key of the registry. When a customer buys 
software, s/he automatically gets a personalised smart card. Each different program recorded on a diskette 
is encrypted under a different file key, KF, designated by the supplier of the software. When a customer 

20 buysa program on a diskette,- the-customer mails a proof of purchase coupon-to the vendor along.with.his 
or her name and the serial number from his or her smart card. In lieu of this, the proof of purchase coupon 
contains an authorisation number that must be scratched clear as previously described. The numbers are 
sparse such that no one could easily guess a number that represents a valid authorisation number. The 
customer calls the vendor and asks for a special password to activate his or her diskette. This number is 

25 given out only after the proof of purchase authorisation number has been supplied and checked against an 
active online file to make sure that no one has already used the number. If all conditions are satisfied, the 
vendor asks for the customer's card number and uses this to access another active online file to obtain the 
key, KP, associated with the smart card as described with reference to Figure 6. The vendor then enciphers 
the file key, KF, of the purchased program and gives this number to the customer as a password. The 

30 customer then goes to his or her computer and causes the password to be written in the header of the file 
on the diskette as previously described. As shown in Figure 20, the header of the diskette has stored 
therein the password eKP(PG123456(KF) where KF is the secret file key of the program. Thus, to this point 
the procedure is similar to that described with respect to the smart card/DES only algorithm. 

The computer manufacturer personalises the computer with a unique key pair, the computer public key, 

35 PKt, and the computer secret key, SKt. The computer manufacturer has the public key of the computer 
recorded in a public registry. In effect, this means that PKt is stored in the form dSu(PKt), where SKu is the 
secret key of the registry and PKt is the public key of the computer. This value dSu (PKt) is also stored in 
the computer. 

To use a diskette at any computer, there is a handshake protocol used between the smart card 16 and 

40 the computer 10 which, in effect, recovers the file key, KF, from encipherment under the key KP and 
enciphers it under the public key, PKt, of the computer. More specifically, the public key, PKt, of the 
computer 10 in the form dSu(PKt) is encrypted in encryption block 161 with the public key of the registry, 
PKu, to produce the public key, PKt, of the computer. The notation dSu (PKt.O) means that the public key 
PKt with several redundancy bits (0 bits in this case) concatenated with it is decrypted under the secret key 

45 SKu. SKu is the secret key belonging to the computer manufacturer. The redundancy bits are added to the 
message so that upon decryption, one can ensure that no spurious text is decrypted and used as the key 
PKt. Ordinarily, 16 to 64 bits of redundancy is enough. As a result of these redundancy bits, the output of 
encryption block 161 must be checked to ensure that the redundancy bits compare with a prestored 
constant value. If they do, then one can be certain that the recovered PKt is the public key of some 

so computer manufactured by the computer manufacturer. This ensures that an opponent can not get a smart 
card to use a public key PKt except one issued by the computer manufacturer. Of course, it will be 
recognised by those skilled in the art that the block with the redundancy bits will typically be longer that the 
public key PKu which will necessitate splitting the block and performing the encryption process under PKu 
using chaining techniques well known in the art. 

55 The program number read from the diskette is also encrypted with the key KP in encryption block 162 
to generate the key eKP(PG1 23456) which is used to decrypt the encrypted key KF in decryption block 
163. The output of decryption block 163 is exclusive ORed with a random number T produced by random 
number generator 107, and the result is encrypted in encryption block 164 with the key PKt to produce the 
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secret file key, KF, exclusive ORed with the random number T encrypted under the public key of the 
computer, PKt. This password is passed by the smart card 16 to the cryptographic facility 101 of the 
computer 10 where it is decrypted in decryption block 105 using the secret key, SKt, of the computer and 
then exclusive ORed with the random number T. The file key, KF, is now in a form that can be used at the 
5 computer. The protocol is such that the handshake will work only at a suitable computer with a public key 
that has been properly recorded in the registry, i.e. for which PKt has been deciphered under the secret key 
of the registry. 

The advantages of the mixed public key and DES embodiment are several. No secret universal key 
needs to be stored on the card since all universal keys used in the system are public keys. Even if the file 

70 key, KF, is discovered, there is no way for an adversary to cause a clear key to be accepted by the card. 
The value T sent from the computer prevents an adversary from tapping the interface to obtain the 
encrypted key KF and replaying it into a computer. If it were easy to input parameters across the interface 
from a dummy card, such an attack is thwarted by incorporating the value T. 

The described protocol allows software vendors to market encrypted programs that will operate with a 

75 particular computer and smart card with no loss in security to the protected software of a given vendor or 
the secret keys or parameters that support the system. To interface to the system, it is only necessary for 
the software vendor to forward an electronic message to the key distribution centre, passing the program 
number and computer number or, in the case of an implementation supporting smart cards, passing the 
program number and smart card number. The key distribution centre returns a cryptographic key unique to 

20 the program number and - computer number or smart card number, -The software vendor -uses -this - 
cryptographic key in conjunction with the secret file key under which the program has been encrypted to 
generate the required password. 

The cryptographic facility 101 supports a limited set of cryptographic operations for key management 
purposes. These operations are controlled by seven microcode routines stored in ROM and initiated by 

25 decoding of an operation code corresponding to a specific operation. The first of the seven operations is 
illustrated in Figure 15 of the drawings. With no smart card, the first operation is decoded in operation 
control unit 102, and the address for the microcode is stored in register 104. The first operation accepts a 
password P1 and a number P2 representing the concatenation of the program number and diskette serial 
number read from a file header record, and from these input parameters, it derives a file key, KF, that is 

30 used only by the cryptographic facility to decrypt and encrypted program for the sole purpose of executing 
the program. More specifically, the program number and diskette serial number, concatenated together, are 
encrypted under a "burned in" key eKT(TR5678) in encryption block 103 to produce a cipher text output 
C1. Then, the password is decrypted in block 105 using as a key the cipher text C1 produced by block 103 
to produce cipher text C2 representing the file key, KF. The user has no access to the file key; i.e. it is kept 

35 secret. 

With the smart card, the second operation shown in Figure 16 causes a random number T to be 
generated inside the cryptographic facility. A special latch 106 in the cryptographic facility is also set on as 
a result of this operation. The value of T is generated by the random number generator 107 and stored in a 
T register 108 in the cryptographic facility and also presented as an output so that it can be sent to the 

40 smart card. In carrying out the computer/smart card together with the parameters P1 (password) and P2 
(program number // diskette serial number, where // denotes concatenation) and a third parameters P3. 
Where the crypto facility uses the DES algorithm, as shown in Figures 8 and 9, to encrypt the file key, P3 is 
the computer number. Alternatively, where the crypto facility uses the PK algorithm to encrypt the file key, 
as shown in Figures 13 and 14, P3 represents the concatenation of the public key of the computer, PKt, and 

45 a non-secret constant of sufficient bits which may have a value of zero all decrypted under the secret key, 
SKu, of the distribution centre. 

Also with the smart card, a third operation shown in Figure 17 accepts a password P4 from the smart 
card provided that the latch 106 is set on. Otherwise, the request is ignored. From the password P4 and the 
stored random number T in register 108, it derives a file key, KF, that is used by the cryptographic facility 

so to decrypt an encrypted program for the purpose of only executing that program. The decryption algorithm 
for deriving the file key, KF, may be DES or may be PK. The user has no access to the file key. After the 
latch 106 has been tested, latch 106 is reset by operation control unit 102. This ensures that a new random 
number T must be generated before another password will be accepted by the cryptographic facility via 
another invocation of the third operation and thus prevents old passwords from being played back into the 

55 cryptographic facility. Used together, the second and third operations are such that they allow an encrypted 
program to be decrypted and executed at any computer with a similarly installed cryptographic facility 
supporting those operations. The microcode for the third operation proceeds as follows: First, latch 106 is 
tested to see if it is set. If not, the operation is aborted; otherwise, the latch is reset. The parameter P4 is 
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then decrypted with the "burned in" key KT in decryption block 105 to produce the cipher text output C1. 
This decryption step is performed with the DES algorithm using KT = eKT(TR5678) where only DES is 
available as shown in Figure 8 or, with the PK algorithm, the decryption step is performed using KT = SKt 
where both DES and PK are available as shown in Figure 13. In either case, the resulting cipher text C1 is 
5 exclusive ORed with the random number T stored in register 108 to produce the cipher text C2 representing 
the file key, KF. 

The register 104 in addition to storing the address for the decoded microcode, has three flags denoted 
D, E and P. Up to this point in the description, the operation of the cryptographic facility has been to derive 
the file key that can be used to decrypt an encrypted program. As will be understood from the following 

w description, it is also possible for a user to use the file key to encrypt data. The flags D, E and P are used 
to control these operations. The D flag is the decryption flag, and the E flag is the encryption flag. The 
cryptographic operations of encipher and decipher data are assumed to be such that a cipher operation will 
be performed, only if the E flag is tested and found to be set for an encipher data operation or if the D flag 
is tested and found to be set for a decipher operation. In addition, before decrypted data is directed from 

75 the cryptographic facility, the cryptographic facility will test the P flag. If the P flag is set, the decrypted data 
will be directed to an execute only memory in the cryptographic facility; otherwise, the decrypted data will 
be directed to the main memory. Thus, in the case of the first and third operations described above, the 
microcodes for those operations would in addition set the D flag, reset the E flag, and set the P flag. 

In addition to the first three operations, the cryptographic facility also supports a limited set of general 

20 purpose cryptographic operations; The first of these," referred to as the fourth operation,- is similar to the first 
operation and is illustrated in Figure 18. With no smart card, the fourth operation accepts user selected 
parameters P1 and P2, which may be any different arbitrary values selected by the user. From these 
parameters, the fourth operation generates a file key, KF1 , using a different algorithmic procedure than that 
used by the first operation, where KF1 is a variant of the file key KF. In the fourth operation, the "burned in" 

25 key eKT(TR5678) is used to encrypt parameter P2 in encryption block 103. The output of the encryption 
block 103 is the cipher text C1 which is used in decryption block 105 to produce the cipher text C2 
representing KF. KF is then exclusive ORed with the non-zero constant, C, to produce the variant file key 
KF1. The key KF1 is used only by the cryptographic facility to encrypt and decrypt data. The encrypted 
and decrypted data are under the control of and accessible to the computer user. In this case, the user has 

30 a limited encrypt and decrypt feature, except that the process is performed under the control of a key 
unknown to the user of the computer. By remembering the parameters P1 and P2, the computer user can 
decrypt encrypted data at any later time on his or her computer, or any other computer with a similarly 
installed cryptographic facility supporting the second and fifth operations, by issuing the second operation 
to generate a new random number T. The computer/smart card protocol passes T, P1 , P2, and P3 to the 

35 smart card to generate P4 as shown in Figure 9 or Figure 14. 

Then a fifth operation is called for to cause the cryptographic facility to recover the key KF1 from P4, C 
and the stored random number T. Thus, the user cannot migrate the encrypted data to another computer 
and decrypt it with the same parameters P1 and P2. 

With the smart card, a fifth operation shown in Figure 19 accepts a password P4 from the smart card 

40 provided that the latch 106 is set on. Otherwise, the request is ignored. From this parameter P4, the fifth 
operation generates the file key, KF1, using a different algorithmic procedure than used by the third 
operation. The password P4 used in the fifth operation is produced by the smart card, using the DES 
algorithm procedure shown in Figure 9 or the PK algorithm procedure shown in Figure 14, from parameters 
P1 , P2 and P3 as well as the random number T generated by the second operation, where P1 and P2 are 

45 user defined parameters and P3 is the computer number when the crypto facility uses the DES algorithm to 
encrypt KF or P3 is the cryptographic variable eSKu(PKt.O) when the crypto facility uses the PK to encrypt 
KF. Thus, again the user has a limited encrypt and decrypt feature, except that the process is performed 
under the control of a key unknown to the user of the computer. By remembering the parameters P1 and 
P2, the computer user can decrypt encrypted data at any later time on his or her computer, or any other 

so computer with a similarly installed cryptographic facility supporting the second and fifth operations, by 
issuing the second operation to generate a new random number T. The' computer/smart card protocol 
passes T, P1, P2 and P3 to the smart card to generate P4 as shown in Figure 9 or Figure 14. Then a fifth 
operation is called for to cause the cryptographic facility to recover the key KF1 from P4, C and the stored 
random number T. Thus, the user can migrate the encrypted data to another computer and decrypt it with 

55 the same parameters P1 and P2. Again, the encrypted and decrypted data are under the control of and 
accessible to the computer user. The microcode for the fifth operation proceeds as follows: First, latch 106 
is tested to see if it is set on. If it is not, the operation is aborted; otherwise, the latch is reset and the input 
parameter P4 is decrypted in decryption block 105 with the "burned in" key KT. Where only DES is 
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available, KT = eKT(TR5678), but where both DES and PK are available., KT = SKt. The output of the 
decryption block 105 is the cipher text C1 which is exclusive ORed with the random number T stored in 
register 108 to produce the cipher text C2 representing KF. KF is then exclusive ORed with the non-zero 
constant C to produce the variant file key KF1 . The microcode then sets the D and E flags and resets the P 

5 flag in the register 104. 

With no smart card, a sixth operation shown in Figure 20 accepts a user selected password P1 and a 
number P2, which may be any arbitrary values selected by the user, and from these numbers, it generates 
a file key, KF, using the same algorithmic procedure as used by the first operation. The file key is used 
only by the cryptographic facility to encrypt data. In this case, the user can encrypt his or her own data but 

w not decrypt it. Used in conjunction with the first operation, the sixth operation allows a user to encrypt his or 
her own programs and store them on diskette or hard disk in protected form. The parameters P1 and P2 
can also be written in the header record of the diskette file or disk file. Later, the saved values of P1 and P2 
are used as input parameters with the first operation to decrypt and execute programs. P1 and P2 are such 
that they permit the encrypted program to be decrypted and executed only at the computer where the 

75 program was originally encrypted, so that encrypted programs cannot be migrated to other computers and 
executed. The microcode for the .sixth operation proceeds as follows: First, the parameter P2 is encrypted 
in encryption block 103 with the "burned in" key eKT(TR5678) to produce the cipher text C1. The cipher 
text C1 is used in decryption block 105 to decrypt the parameter P1 and produce the cipher text C2 
representing the file key, KF. The microcode sets the E flag and resets the D and P flags in register 104. 

20 With a smart card, a seventh operation shown in Figure 21 accepts a-password P4-from the smart card 
provided that the latch 106 is set on. Otherwise, the request is ignored. From this it generates a file key, KF, 
using the same algorithmic procedure used by the third operation. More specifically, the microcode 
decrypts the input parameter P4 in decryption block 105 with the "burned in" key KT to produce the cipher 
text C1. With the DES algorithm alone, KT = eKT(TR5678) is used, or with a PK algorithm, KT = SKt. The 

25 cipher text is then exclusive ORed with the random number T stored in register 108 to produce the cipher 
text C2 representing the file key, KF. The microcode for the seventh operation also sets the E flag and 
resets the D and P flags in the register 104. In the seventh operation, the key KF is used only by the 
cryptographic facility to encrypt data. The user can encrypt his or her own data but cannot decrypt it. The 
password P4 used in the seventh operation is produced by the smart card, using the DES algorithm 

30 procedure shown in Figure 9 or the PK algorithm procedure shown in Figure 1 4, from the parameters P1 , 
P2 and P3 as well as the random number T generated by the second operation. P1 and P2 are user defined 
parameters. Where the crypto facility uses the DES algorithm, as shown in Figures 8 and 9, to encrypt the 
file key, P3 is the computer number. Alternatively, where the crypto facility uses the PK algorithm to 
encrypt the file key, as shown in Figures 13 and 14, P3 represents the concatenation of the public key of 

35 the computer, PKt, and a nonsecret constant of sufficient bits which may have a value of zero all decrypted 
under the secret key, SKu, of the distribution centre. Used in conjunction with the second operation, the 
seventh operation allows the user to encrypt his or her own programs and store them on a diskette or hard 
disk in protected form. The parameters P1 and P2 can also be written in the header record of the diskette 
or disk file. Later, the computer user can decrypt and execute the program on his or her computer, or any 

40 other computer with a similarly installed cryptographic facility supporting the second and third operations, 
by issuing the second operation to produce a new random number T, passing parameters P1 , P2, P3, and 
T to the smart card and requesting a new value of P4, and issuing the third operation to recover the file key 
KF in the cryptographic facility from the parameter P4 and the stored random number T. Thus, the 
parameters P1 and P2 are such that they permit an encrypted program to be decrypted and executed at 

45 other computers supporting the second and third operations. Because the seventh operation does not allow 
decryption under the recovered key KF, it cannot be misused by a user to decrypt an encrypted program 
purchased in the usual manner. 

Summarizing, the procedures that are available to a user of a computer with a cryptographic facility that 
supports the seven operations just described are listed in the table below: 

50 



55 
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DES Only, No Smart Card Operations 

1. Program Decryption-Execution OP1 

2. File Encryption/Decryption OP4 

3. Program Encryption 0P6 

DES Only, With Smart Card 

1. Program Decryption-Execution OP2, 0P3 

2. File Encryption/Decryption OP2, OPS 

3. Program Encryption OP2, OP7 



20 „ D E s _/ p _ K / w 4th Smart. Card. 
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1. Program Decryption-Execution OP2, OP3 

2. File Encryption/Decryption OP2, OPS 

3. Program Encryption OP2, OP7 



30 Claims 

1. A method of software protection comprising the steps of: 

encrypting a program with a file key, and writing the encrypted program on a storage medium as a 
35 program file; 

providing a computer, having a protected memory and a cryptographic facility, with a secret 
cryptographic key identifier cryptographically derived from a number identifying the computer; 

40 providing a user of the storage medium containing the encrypted program with a password 

cryptographically derived from at least the file key, the number identifying the computer, a number 
identifying the storage medium, and a number identifying the program; 

entering the password into the computer when the medium is loaded thereinto; 
45 deriving the file key from at least the password, the storage medium number, the program number, 

and the cryptographic key identifier; and 

decrypting into executable form at least a portion of the program using the derived file key. 

50 2. A method as claimed in claim 1 , wherein, only when the program is first loaded in said computer, 
performing the steps of prompting the user for the password, and in response to the input of the 
password by the user, writing the password in the header record of the program file. 

3. A method as claimed in claim 1 or claim 2, further comprising the step of writing the decrypted 
55 program into said protected memory from which it can only be executed. 

4. A method as claimed in any preceding claim wherein the step of providing the password is performed 
by providing the user of the storage medium containing the encrypted program with an authorisation 
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number, requesting the user to input the authorisation number, the program number, the storage 
medium number and the number identifying the computer, computing from the inputted program 
number and storage medium number a computed authorisation number, comparing the computed 
authorisation number with the inputted authorisation number, providing a key distribution centre with the 
inputted program number, storage medium number and the number identifying the computer if the 
computed and inputted authorisation numbers are the same, otherwise rejecting a password request by 
the user, generating a first key as a function of the number identifying the computer and then 
encrypting the program number and storage medium number concatenated together with said first key 
to produce a second key at the key distribution centre, and encrypting the secret file key of the 
program with said second key to produce said password. 

5. A method as claimed in claim 4 further comprising the step of determining if the computed 
authorisation number has been used before, and if it has not, then performing the step of comparing 
the computed authorization number with the inputted authorisation number, otherwise rejecting a 
password request by the user. 

6. A method as claimed in claim 2 and any one of claim 4 or claim 5 wherein the steps of deriving the file 
key and decrypting at least a portion of the program are performed by the steps of reading said 
password, program number and storage medium number from said header record, encrypting said 

- program -number-and- storage medium number-from said header record, encrypting said program 
number and storage medium number concatenated together with a key which is a function of said 
secret cryptographic key identifier to produce a decryption key, decrypting said password with said 
decryption key to produce said file key, and decrypting the program using said secret file key. 

7. A method as claimed in claim 1 or claim 2, wherein the step of providing a computer with a secret 
cryptographic key identifier is performed by the software or computer vendor issuing to the user a 
smart card having said secret cryptographic key identifier, said smart card interfacing with said 
computer. 

8. A method as claimed in claim 7 wherein the step of providing the password is performed by the steps 
of providing the user of the storage medium containing the encrypted program with an authorization 
number, requesting the user to input the authorisation number, a number of the smart card, the 
program number and the storage medium number, computing an authorisation number from the 
inputted program number and storage medium number, comparing the computed authorisation number 
with the inputted authorization number, and if the computed and inputted authorisation numbers are the 
same, providing a key distribution centre with the inputted number of the smart card, the program 
number and the storage medium number, otherwise rejecting a password request by the user, 
generating a card key corresponding to the inputted card number and then encrypting the program 
number and storage medium number concatenated together with said card key to produce an 
encryption key at the key distribution centre, generating a secret file key corresponding to the inputted 
program number, and encrypting said secret file key with said encryption key to produce said 
password. 

9. A method as claimed in claim 7 or claim 8, wherein the steps of deriving the file key and decrypting at 
least a portion of the program, are performed by the steps of supplying the smart card with the 
password, program number and storage medium number, encrypting in the smart card the program 
number and storage medium number concatenated together with the key of the smart card to produce 
a decryption key, decrypting the password with said decryption key to produce the secret file key, and 
decrypting in the computer at least said portion of the program using the secret file key. 

10. A method as claimed in claim 9 further comprising the steps of supplying the smart card with a number 
identifying said cryptographic facility, encrypting in the smart card the number identifying said 
cryptographic facility with a universal key to produce a computer encryption key, generating in the 
computer a random number and supplying the random number to the smart card, exclusive ORing in 
the smart card the secret file key with the random number and encrypting the result with said computer 
encryption key to produce an encrypted exclusive ORed output, decrypting in the computer the 
encrypted exclusive ORed output with the computer encryption key, and exclusive ORing the decryp- 
ted exclusive ORed output with said random number to produce the secret file key. 
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11. A method as claimed in claim 10 wherein the steps of encryption in the smart card and decryption in 
the computer are performed using the DES algorithm. 

12. A method as claimed in claim 9 further comprising the steps providing the computer with a public key, 
5 PKt, decrypted under the secret key of a public registry, and also providing said cryptographic facility 

with a corresponding secret key, SKt, providing said smart card with a public key, PKu, encrypting in 
the smart card the computer public key decrypted under the secret key of the public registry with the 
card's public key PKu to produce said key PKt, generating in the computer a random number and 
supplying the random number to the smart card, exclusive ORing in the smart card the secret file key 
10 with the random number and encrypting the result with said key PKt to produce an encrypted exclusive 
ORed output, decrypting in the computer the encrypted exclusive ORed output with the key SKt, and 
exclusive ORing the decrypted exclusive ORed output with said random number to produce the secret 
file key. 

75 13. A method as claimed in claim 12 wherein the steps of encryption and decryption in the smart card and 
the computer are performed by selectively using the DES algorithm and a public key algorithm. 

14. A method as claimed in claim 1 wherein said cryptographic facility supports encryption and decryption 
of user generated data comprising the steps of accepting a user input parameter, and decrypting said 

20 user input parameter under a key which is a function of said secret unique cryptographic key- identifier 
to generate a file key for encrypting and decrypting said user generated data. 

15. A method as claimed in claim 14 wherein said input parameter is input as a first parameter and a 
second parameter, said step of decrypting comprises the steps of encrypting said second parameter 

25 under said key which which is a function of said secret unique cryptographic key identifier to produce a 
first cipher text, and decrypting said first parameter using said first cipher text to produce a second 
cipher text corresponding to a key KF. 

16. A method as claimed in claim 14 further comprising the step of exclusive ORing said key KF with a 
30 constant to produce a key KF1 which is used as a file key for encrypting and decrypting said user 

generated data. 

17. A method as claimed in claim 14 further comprising the steps of generating a random number, and 
exclusive ORing said random number with the decrypted user input parameter to produce a key KF 

35 and exclusive ORing said key KF with a constant to produce a key KF1 which is used for encrypting 
and decrypting user generated data. 

18. A method as claimed in claim 14 wherein said cryptographic facility supports encryption of user 
generated data comprising the steps of encrypting user generated data under said file key, decrypting 

40 user generated data by the steps of accepting the user input parameter in the form of a first parameter 
and a second parameter, encrypting said second parameter with said key which is a function of said 
secret cryptographic key identifier to produce a decrytion key, decrypting said first parameter with said 
decryption key to produce a key KF related to said file key, and decrypting said user generated data 
using said file key. 

45 

Patentanspruche 

1. Verfahren zur Sicherung von Software, das die folgenden Schritte aufweist: 

so Verschlusseln eines Programmes mit einem Dateischlussel und Schreiben des verschlusselten Pro- 
grammes als Programmdatei auf ein Speichermedium; 

Bereitstellen eines Computers, der einen geschtltzten Speicher und eine kryptographische Einrichtung 
besitzt mit einer Erkennung fur eine geheime kryptographischen Schlusselerkennung, der kryptogra- 
55 phisch aus einer den Computer identifizierenden Nummer hergeleitet wird; 

Ausstatten eines Benutzers des Speichermediums, welches das verschlusselte Programm enthalt, mit 
einem Kennwort, das kryptographisch zumindest aus dem Datenschlussel, der den Computer identifi- 
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zierenden Nummer, einer das Speichermedium identifizierenden Nummer und einer das Programm 
identifizierenden Nummer hergeleitet wird; 

Eingehen des Kennwortes in den Computer, wenn das Medium darin geiaden ist; 

5 

Herteiten des Dateischlussels von zumindest dem Kennwort, der Nummer des Speichermediums, der 
Programmnummer und der kryptographischen Schlusselerkennung und 

Entschliisseln zumindest eines Teitabschnittes des Programmes in eine ausfuhrbare Form unter 
10 Verwendung des Dateischlussels. 

2. Verfahren nach Anspruch 1, bei welchem die Schritte der Eingabeaufforderung des Kennwortes an den 
Benutzer nur ausgefuhrt werden, wenn zuerst das Programm in den Computer geiaden wurde, und bei 
welchem als Reaktion auf die Eingabe des Kennwortes durch den Benutzer das Kennwort in den 

75 Kopfdatensatz der Programmdatei geschrieben wird. 

3. Verfahren nach Anspruch 1 oder 2, das weiters den Schritt zum Schreiben des entschlusselten 
Programmes in den geschutzten Speicher aufweist, aus dem es ausschlieBlich ausgefOhrt werden kann. 

20 - 4.- -Verfahren-nach einem-der-vorigen-Anspruche.-bei welchem derSchritt zum Bereitstellen.des Kennwor- _ 
tes durch Ausstatten des Benutzers des Speichermediums, welches das verschliisselte Programm 
enthalt, mit einer Autorisierungsnummer, Auffordern des Benutzers zur Eingabe der Autorisierungsnum- 
mer, der Programmnummer, der Nummer des Speichermediums und der den Computer identifizieren- 
den Nummer, Berechnen einer berechneten Autorisierungsnummer aus der eingegebenen Programm- 

25 nummer und der Nummer des Speichermediums, Vergleichen der berechneten Autorisierungsnummer 
mit der eingegebenen Autorisierungsnummer, Beliefern eines Schlusselverteilungszentrums mit der 
eingegebenen Programmnummer, Nummer des Speichermediums und der den Computer identifizie- 
renden Nummer, falls die berechnete und die eingegebene Autorisierungsnummer gleich sind, andern- 
falis Zuruckweisen einer Kennwortanforderung des Benutzers, Erzeugen eines ersten SchlOssels als 

30 Funktion der den Computer identifizierenden Nummer und dann Verschlusseln der Programmnummer 
und der Nummer des Speichermediums, die mit dem ersten Schitissel miteinander verkettet sind, urn 
in dem Schlusselverteilungszentrum einen zweiten Schlussel zu erzeugen, und Verschlusseln des 
geheimen Dateischlussels des Programmes mit dem zweiten Schlussel, urn das Kennwort zu erzeugen, 
ausgefuhrt wird. 

35 

5. Verfahren nach Anspruch 4, das weiters den Schritt des Bestimmens, ob die berechnete Autorisie- 
rungsnummer zuvor Benutzt wurde, und wenn das nicht der Fall ist, dann das Ausfuhren des Schrittes . 
zum Vergleichen der berechneten Autorisierungsnummer mit der eingegebenen Autorisierungsnummer, 
und andernfalls das Zuruckweisen der Kennwortanforderung des Benutzers aufweist. 

AO 

6. Verfahren nach Anspruch 2 und einem der Anspruche 4 oder 5, bei welchem die Schritte zum Herleiten 
des DateischlCissels und zum Entschliisseln zumindest eines Teilabschnittes des Programmes durch 
die folgenden Schritte ausgefuhrt werden: Lesen des Kennwortes, der Programmnummer und der 
Nummer des Speichermediums vom Kopfdatensatz, VerschlUsseln der Programmnummer und der 

45 Nummer des Speichermediums vom Kopfdatensatz, Verschlusseln der Programmnummer und der 
Nummer des Speichermediums, die miteinander mit einem Schlussel verkettet sind, der eine Funktion 
der geheimen kryptographischen Schlusselerkennung ist, urn einen Entschlusselungsschlussel zu 
erzeugen, Entschlussetn des Kennwortes mit dem Entschliisselungsschlussels, urn den Dateischlussel 
zu erzeugen, und EntschlOssein des Programmes unter Verwendung des geheimen Dateischlussels. 

50 

7. Verfahren nach Anspruch 1 oder 2, bei welchem der Schritt des Bereitstellens eines Computers mit 
einer geheimen kryptographischen Schlusselerkennung von dem Software- oder dem Computerhandler 
durch Ausgeben einer Smart-Karte durchgefOhrt wird, welche die geheime kryptographische Schlussel- 
erkennung besitzt, wobei die Smart-Karte an den Computer angeschlossen wird. 

55 

8. Verfahren nach Anspruch 7, bei welchem der Schritt zum Bereitstellen des Kennwortes durch die 
folgenden Schritte ausgefuhrt wird: Ausstatten des Benutzers des Speichermediums, welches das 
verschliisselte Programm enthalt, mit einer Autorisierungsnummer, Auffordern des Benutzers zur 
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Eingabe der Autorisierungsnummer, einer Nummer der Smart-Karte, der Programmnummer und der 
Nummer des Speichermediums, Berechnen einer Autorisierungsnummer aus der eingegebenen Pro- 
grammnummer und der Nummer des Speichermediums, Vergleichen der berechneten Autorisierungs- 
nummer mit der eingegebenen Autorisierungsnummer, und falls die berechnete und die eingegebene 

5 Autorisierungsnummer gleich sind, Beliefern eines Schlusselverteilungszentrums mit der eingegebenen 
Nummer der Smart-Karte, der Programmnummer und der Nummer des Speichermediums, andernfalls 
Zuruckweisen einer Kennwortanforderung des Benutzers, Erzeugen eines Kartenschlussels entspre- 
chend der eingegebenen Kartennummer und dann Verschlusseln der Programmnummer und der 
Nummer des Speichermediums, die miteinander durch den Karten schlussel verkettet sind, urn im 

10 SchlUsseiverteilungszentrum einen VerschlusselungsschtUssel zu erzeugen Erzeugen eines geheimen 
Dateischlussels entsprechend der eingegebenen Programmnummer und Verschlusseln des geheimen 
Dateischlussels mit dem Verschlussetungsschlussel, urn das Kennwort zu erzeugen. 

9. Verfahren nach Anspruch 7 oder 8, bei welchem die Schritte zum Herleiten des Dateischlussels und 
75 zum Entschlusseln zumindest eines Teilabschnittes des Programmes durch die folgenden Schritte 

ausgefuhrt wird: Beliefern der Smart-Karte mit dem Kennwort, der Programmnummer und der Nummer 
des Speichermediums, Verschlusseln der Programmnummer und der Nummer des Speichermediums 
in der Smart-Karte, die miteinander durch den SchlGssel der Smart-Karte verkettet sind, urn einen 
Entschlusselungsschlussel zu erzeugen, Entschlussein des Kennwortes mit dem Entschlusselungs- 

20 schlusselrum-einen geheimen Dateischlussel-zu-erzeugenr und-Entschtusseln-zumindest den-Teilab- 

schnitt des Programmes in dem Computer unter Verwendung des geheimen Dateischlussels. 

10. Verfahren nach Anspruch 9, das weiters die folgenden Schritte aufweist: Beliefern der Smart-Karte mit 
einer die kryptographische Einrichtung identifizierenden Nummer, Verschlusseln der die kryptographi- 

25 sche Einrichtung identifizierenden Nummer mit einem universeilen Schtusset in der Smart-Karte, urn 
einen Computerverschlusselungsschlussel zu erzeugen, Erzeugen einer Zufallszahl im Computer und 
Beliefern der Smart-Karte mit der Zufallszahl, Exklusiv-ODER-Verknupfen des geheimen Dateischlus- 
sels mit der Zufallszahl in der Smart-Karte und Verschlusseln des Ergebnisses mit dem Computerver- 
schlGsselungsschlOssel, urn eine verschlUsselte Exklusiv-ODER-Ausgabe zu erzeugen, Entschlusseln 

30 der verschlusselten Exklusiv-ODER-Ausgabe mit einem Computerverschlusselungsschlussel in dem 
Computer und Exklusiv-ODER-VerknOpfen der entschlusselten Exklusiv-ODER-Ausgabe mit der Zufalls- 
zahl, urn den geheimen Dateischlussel zu erzeugen. 

11. Verfahren nach Anspruch 10, bei welchem die Schritte des Verschlusselns in der Smart-Karte und des 
35 Entschlusselns im Computer unter Verwendung des DES-Algorithmus durchgefuhrt werden. 

12. Verfahren nach Anspruch 9, das weiters die folgenden Schritte aufweist: Beliefern des Computers mit 
einem offentlichen SchlQssel, PKt, der mit dem geheimen Schlussel einer offentlichen Registrierung 
entschlusselt wurde, und ebenso Beliefern der kryptographischen Einrichtung mit einem entsprechen- 

40 den geheimen Schlussel, SKt, Beliefern der Smart-Karte mit einem offentlichen Schlussel, PKu, 
Verschlusseln des offentlichen Schlussels des Computers in der Smart-Karte, der mit dem geheimen 
Schlussel der offentlichen Registrierung entschlusselt wurde, mit dem offentlichen Schlussel PKu der 
Karte, urn den Schlussel PKt zu erzeugen, Erzeugen einer Zufallszahl im Computer und Liefern der 
Zufallszahl an die Smart-Karte, Exclusiv-ODER-VerknQpfen des geheimen Dateischlussels mit der 

45 Zufallszahl in der Smart-Karte und Verschlusseln des Ergebnisses mit dem Schlussel PKt, urn eine 
verschltisselte Exlusiv-ODER-Ausgabe zu erzeugen, Entschlusseln der verschlusselten Exklusiv-ODER- 
Ausgabe im Computer mit dem Schlussel SKt und Exklusiv-ODER-Verknupfen der entschlusselten 
Exklusiv-ODER Ausgabe mit der Zufallszahl, urn den geheimen Dateischlussel zu erzeugen. 

so 13. Verfahren nach Anspruch 12, bei welchem die Schritte des Verschlusselns und des Entschlusselns in 
der Smart-Karte und im Computer durch selektives Verwenden des DES-Algorithmus und eines 
offentlichen Schlusselalgorithmus ausgefuhrt werden. 

14. Verfahren nach Anspruch 1, bei welchem die kryptographische Einrichtung das Verschlusseln und 
55 Entschlusseln von Daten untersttitzt, die vom Benutzer erzeugt werden, das die Schritte des Anneh- 
mens eines Benutzereingabeparameters und des Entschlusselns des Benutzereingabeparameters mit 
einem SchlGssel aufweist, der eine Funktion der geheimen eindeutigen kryptographischen SchlUsseler- 
kennung ist, um einen Dateischlussel zum Verschlusseln und Entschlusseln der vom Benutzer erzeug- 
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ten Daten zu erzeugen. 

15. Verfahren nach Anspruch 14, bei welchem der Eingabeparameter als erster und als zweiter Parameter 
eingegeben wird, wobei der Schritt des Entschlusselns die folgenden Schritte aufweist: Verschlusseln 
5 des zweiten Parameters mit dem Schlussel, der eine Funktion der geheimen eindeutigen kryptographi- 
schen Schlusselerkennung ist, um einen ersten Chiffretext zu erzeugen, und Entschiusseln des ersten 
Parameters unter Verwendung des ersten Chiffretextes, um einen zweiten Chiffretext zu erzeugen, der 
einem Schlussel KF entspricht. 

w 16. Verfahren nach Anspruch 14, das weiters den Schritt des Exklusiv-ODER-Verknupfens des SchlUssels 
KF mit einer Konstante aufweist, um einen Schlussel KF1 zu erzeugen, der als Dateischiussel zum 
Verschlusseln und Entschiusseln der vom Benutzer erzeugten Daten verwendet wird. 

17. Verfahren nach Anspruch 14, das weiters die Schritte des Erzeugens einer Zufallszahl und des 
75 Exklusiv-ODER-Verknupfens der Zufallszahl mit dem entschlusselten Benutzereingabeparameter, um 
einen Schlussel KF zu erzeugen, und des Exklusiv-ODER-Verkntipfens des SchlOssels KF mit einer 
Konstante aufweist, um einen Schlussel KF1 zu erzeugen, der zum Verschlusseln und Entschlussein 
der vom Benutzer erzeugten Daten verwendet wird. 

20 ~ iBTVerfahren nach^Anspruch 14, bei wetchem^die kryptographische Einrichtung das -Verschlusseln -von 
Daten unterstUtzt, die vom Benutzer erzeugt werden, das die folgenden Schritte aufweist: Verschlusseln 
vom Benutzer erzeugter Daten mit dem Dateischiussel, Entschiusseln der vom Benutzer erzeugten 
Daten durch die Schritte des Annehmens des Benutzereingabeparameters in Form eines ersten und 
eines zweiten Parameters, Verschlusseln des zweiten Parameters mit dem Schlussel, der eine Funktion 

25 der geheimen kryptographischen Schlusselerkennung ist, um einen Entschlusselungsschlussel zu 
erzeugen, Entschiusseln des ersten Parameters mit dem Entschlusselungsschlussel, um einen Schlus- 
sel KF zu erzeugen, der mit dem Dateischiussel in Verbindung steht, und Entschlussein der vom 
Benutzer erzeugten Daten unter Verwendung des Dateischliissels. 

30 Revendications 

1. Proc£d§ de protection de logiciel, comprenant les Stapes de: 

chiffrer un programme avec une cle de fichier, et ecrire le programme chiffre sur un support 
d'emmagasinage en tant qu'un fichier de programme ; 
35 pourvoir un ordinateur, ayant une memoire protegee et une facilite cryptographique, d'un identifica- 

teur de cle* cryptographique secrete derive* cryptographiquement d'un numero identifiant I'ordinateur; 

pourvoir un utilisateur du support d'emmagasinage contenant le programme chiffre, d'un mot de 
passe cryptographiquement derive* au moins de la cle* de fichier, du numero identifiant I'ordinateur, d'un 
numero identifiant le support d'emmagasinage, et d'un numero identifiant le programme; 
40 entrer le mot de passe dans I'ordinateur lorsque le support y esf charged 

deriver la cle de fichier au moins du mot de passe, du numero de support d'emmagasinage, du 
numero de programme, et de I'identificateur de cle cryptographique; et 

d^chiffrer en forme executable au moins une portion du programme utilisant la cle* de fichier 
derivee. 

45 

2. Procede selon la revendication 1 dans lequel, seulement lorsque le programme est d'abord charge 
dans ledit ordinateur, il est accompli les Stapes de sollicitation du mot de passe de I'utilisateur et, en 
reponse a I'entree du mot de passe par I'utilisateur, d'ecriture du mot de passe dans I'enregistrement 
d'en-tete du fichier de programme 

50 

3. Proc&le* selon les revendications 1 ou 2, comprenant en outre retape d'ecriture du programme 
dechiffn§ dans ladite memoire protegee a partir de laquelle il peut etre seulement execute. 

4. Procede selon Tune quelconque des revendications precedentes, dans lequel I'etape de pourvoir le mot 
55 de passe est accomplie en fournissant a I'utilisateur du support d'emmagasinage contenant le 

programme chiffre un numero d'autorisation demandant a I'utilisateur d'entrer le numero autorise, le 
numero de programme, le numero de support d'emmagasinage et le numero identifiant I'ordinateur, en 
calculant a partir du numero de programme et du numero de support d'emmagasinage entres, un 
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numeVo d'autorisation d'ordinateur, en comparant le numeVo d'autorisation calcule* avec le numeVo 
d'autorisation entre\ en fournissant au centre de distribution de cISs les numero de programme, numero 
de support d'emmagasinage et numero identifiant le calculateur entres si les numeros d'autorisation 
entre* et calcule* sont les memes, autrement en rejetant une demande de mot de passe par I'utilisateur, 
5 engendrant une premiere cle en fonction du numero identifiant I'ordinateur et ensuite en chiffrant le 
numeVo de programme et le numeVo de support d'emmagasinage enchainSs avec ladite premiere cle* 
pour produire une deuxieme cle au centre de distribution de cles, et en chiffrant la cle de fichier 
secrete du programme avec ladite deuxieme cle* pour produire led it mot de passe. 

10 5. ProcSde* selon la revendication 4, comprenant en outre I'eVape de determiner si le numero d'autorisa- 
tion calcule a ete utilise auparavant et, dans la negative, accomplir alors I'etape de comparer le numero 
d'autorisation calcule* avec le numero d'autorisation entre, autrement, rejeter une demande de mot de 
passe par I'utilisateur. 

Procede* selon la revendication 2 et selon I'une quelconque des revendications 4 ou 5, dans lequel les 
etapes de deriver la cle de fichier et dechiffrer au moins une portion du programme, sont accomplies 
par les Stapes d'extraire lesdits mot de passe, numero de programme et numeVo de support 
d'emmagasinage dudit enregistrement d'en-t§te, chiffrer lesdits numero de programme et numero de 
support ^emmagasinage a parti r de I'enregistrement d'en-tete, chiffrer lesdits numeVo de programme 
et numero de support d'emmagasinage^encriaTnSs avec urierde qu'rest fonction dud it- identificateur-de — - 
cle cryptographique secrete pour produire la cle* de dSchiffrement, dechiffrer ledit mot de passe avec 
ladite cle de dechiffrement pour produire ladite cle de fichier, et dechiffrer le programme utilisant ladite 
cle* de fichier secrete. 

25 7. Procede selon les revendications 1 ou 2, dans lequel I'etape de pourvoir un ordinateur d'un identifica- 
teur de cle cryptographique secrete est accomplie par le vendeur d'ordinateur ou de logiciel delivrant a 
I'utilisateur une carte a memoire ayant ledit identificateur de cle cryptographique secrete, ladite carte a 
memoire faisant interface avec ledit ordinateur. 

ProcSde* selon la revendication 7, dans lequel I'eVape de pourvoir un mot de passe est accomplie par 
les etapes de fournir a I'utilisateur du support d'emmagasinage contenant le programme chiffre, un 
numeVo d'autorisation, demander a I'utilisateur d'entrer le numeVo d'autorisation, numeVo de la carte a 
memoire, le numero de programme et le numero de support d'emmagasinage, calculer un numero 
d'autorisation a partir du numeVo de programme entre* et du numeVo de support d'emmagasinage, 
comparer le numero d'autorisation calcule avec le numero d'autorisation entre, et si les numeVos 
d'autorisation calcule* et entre* sont les memes, fournir au centre de distribution de cles le numero entre* 
de la carte a memoire, le numero de programme et le numero de support d'emmagasinage, autrement, 
rejeter une demande de mot de passe par I'utilisateur, engendrer une cle* de carte correspondant au 
numero de carte entre et ensuite chiffrer le numero de programme et le numero de support 
d'emmagasinage enchaTnSs avec ladite cle* de carte pour produire une cle* de chiffrement au centre de 
distribution de cles, engendrer une cle de fichier secrete correspondant au numero de programme 
entre, et chiffrer ladite cle de fichier secrete avec ladite cle de chiffrement pour produire ledit mot de 
passe. 

45 9. Procede* selon les revendications 7 ou 8, dans lequel les Stapes de deliver la cle* de fichier et dechiffrer 
au moins une portion du programme sont accomplies par les etapes de fournir a la carte a memoire le 
mot de passe, le numeVo de programme et le numeVo de support d'emmagasinage, chiffrer dans la 
carte a memoire le numero de programme et le numero de support d'emmagasinage enchaTnes avec 
la cle de la carte a memoire pour produire une cle* de dechiffrement, dechiffrer le mot de passe avec 

so ladite cle de dechiffrement pour produire la cle de fichier secrete, et dechiffrer dans I'ordinateur au 
moins ladite portion du programme utilisant la cle* de fichier secrete, 

10. Procede* selon la revendication 9, comprenant en outre les Stapes de fournir a la carte a memoire un 
numero identifiant ladite facilite cryptographique, chiffrer dans la carte a memoire le numero identifiant 
55 ladite facilite cryptographique avec une cle universelle pour produire une cle de chiffrement d'ordina- 
teur, engendrer dans I'ordinateur un numeVo alSatoire et fournir le numeVo alSatoire a la carte a 
memoire, soumettre a une condition OU exclusif dans la carte a memoire la cle de fichier secrete avec 
le numeVo alSatoire, et chiffrer le resultat avec ladite cle de chiffrement d'ordinateur pour produire une 
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sortie soumise a une condition OU exclusif chiffree, dechiffrer dans I'ordinateur la sortie soumise a une 
condition OU exclusif chiffree avec la cle* de chiffrement d'ordinateur, et soumettre a une condition OU 
exclusif la sortie soumise a une condition OU exclusif dechiffree avec iedit numero aleatoire pour 
produire la cle* de fichier secrete. 

5 

11. Procede selon la revendication 10, dans lequel les Stapes de chiffrement dans la carte a memoire et de 
dechiffrement dans I'ordinateur sont accomplies en utilisant l'algorithme DES. 

12. Precede selon la revendication 9, comprenant en outre les etapes de pourvoir I'ordinateur d'une cle 
70 publique, PKt, dechiffree sous la cle* secrete d'un registre public, et egalement de pourvoir ladite facility 

cryptographique d'une cle secrete correspondante, SKt; fournissant a ladite carte a memoire une cle 
publique, PKu, chiffrer dans la carte a memoire la cle publique d'ordinateur dechiffree sous la cle* 
secrete du registre public avec la cle publique de la carte PKu pour produire ladite cle PKt, engendrer 
dans I'ordinateur un numero aleatoire et fournir le numero aleatoire a la carte a memoire, soumettre a 
75 une condition OU exclusif dans la carte a memoire la cle de fichier secrete avec le numero aleatoire, et 
chiffrer le resultat avec ladite cle PKt pour produire une sortie OU exclusif chiffree, dechiffrer dans 
I'ordinateur la sortie OU exclusif chiffree avec la cle* SKt, et soumettre a une condition OU exclusif la 
sortie OU exclusif dechiffree avec le numero aleatoire pour produire la cle de fichier secrete. 

20 13. Procede selon la revendication 12, dans lequel les etapes de chiffrement et~de dechiffrement dans la 
carte a memoire et dans I'ordinateur sont accomplies en utilisant selectivement l'algorithme DES et un 
algorithme de cle publique. 

14. Procede selon la revendication 1, dans lequel ladite facilite cryptographique assiste le chiffrement et le 
25 dechiffrement des donnees engendrees par I'utilisateur comprenant les Stapes d'accepter un parametre 
d'entree d'utilisateur, et de dechiffrer Iedit parametre d'entree d'utilisateur sous une cle qui est fonction 
dudit identificateur de cle cryptographique secrete unique afin d'engendrer une cle de fichier pour 
chiffrer et dechiffrer lesdites donnees engendrees par I'utilisateur. 

30 15. Procede* selon la revendication 14, dans lequel Iedit parametre d'entree est entre* en tant que premier 
parametre et deuxieme parametre, ladite etape de dechiffrement comprenant les etapes de chiffrer Iedit 
deuxieme parametre sous ladite cle qui est fonction dudit identificateur de cle* cryptographique secrete 
unique pour produire un premier texte en chiffre, et de dechiffrer Iedit premier parametre en utilisant 
Iedit premier texte en chiffre pour produire un deuxieme texte en chiffre correspondant a une cle* KF. 

35 

16. Procede selon la revendication 14, comprenant en outre PStape de soumettre a une condition OU 
exclusif ladite cle KF avec une constante pour produire une cle KF1 qui soit utiiisee en tant que cle de 
fichier pour chiffrer et dechiffrer lesdites donnees engendrees par I'utilisateur. 

40 17. Proc£de* selon la revendication 14, comprenant en outre les etapes d'engendrer un numero aleatoire et 
de soumettre a une condition OU exclusif Iedit numero aleatoire avec le parametre d'entree d'utilisateur 
dechiffre pour produire une cle KF1 qui soit utiiisee pour chiffrer et dechiffrer les donnees engendrees 
par i'utilisateur. 

45 18. Procede selon la revendication 14, dans lequel ladite facilite cryptographique assiste le chiffrement des 
donnees engendrees par I'utilisateur comprenant les etapes de chiffrer les donnees engendrees par 
I'utilisateur sous ladite cie de fichier, dechiffrer les donnees engendrees par I'utilisateur par les etapes 
d'accepter le parametre d'entree de I'utilisateur sous forme d'un premier parametre et d'un deuxieme 
parametre, chiffrer Iedit deuxieme parametre avec ladite cle qui est fonction dudit identificateur de cie 

so cryptographique secrete pour produire une cie de dechiffrement, dechiffrer Iedit premier parametre 
avec ladite cie de dechiffrement pour produire une cie KF associee a ladite cie de fichier, et dechiffrer 
lesdites donnees engendrees par I'utilisateur en utilisant ladite cie de fichier. 
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